��u}��.���y�~��}B|R�Ƌ�If��_��2#Mt�#���GN�-p��y�L�������,?I�L#D��S{�#�P�ڵA�q>�;�÷^bU�MK͖�/��_Z��L/}�8V�3^d��� ��Oz����!�m�(g#���D�}̊��LMg����o���'��I�\�.�Sb((�O�RLJ�R�0�Ї�y�����Pz� Z|/F�b�p��^؎����;�p���ɁBeU`�#���r��^�b����R%T��k"�b�_�e�`KW���;aVX�[笍F����N!B0��'*j�.&���LVqN%�fᖶ���h��%��l%����Eh�z5���B�re42���-��o��y�bu,���B��ʔ����,h ���T�Gs2��,7@�$u �-��&���3�̌ku�b�����JYNK�s�L��%�}GnT?�-r�ežřA�rcg%�CG�w�x����p����0(���t���KS��c�3�9C"������+�"�/�|�:�w���u����;^�O�A�`5}Y����vÿ�o0?$�O3"P�����w��:�?�/�r���$l���@�)�X�� �yb��.��ե��c6��d ��w����(0�����W�� �s;�HO���0�w�s��F���< �\�������j��F�0t������7�u��ql�ܘ�[�����"q4x���K+��sשc�H�l��� ���4"�ں����m<�� 7'�7�T��1�<��i2�S�4,䂩��ɤ݂���*�a��W�8[�` X��}5��~)C&p�Gk�rH��7��������#D\i�7��De����,�+Ӏ���c�Ia?������M9!�K����Pt���ƾ�\[��z�ő��,{�96ʕk������) ԩ� `%`ഡ{_�1O�뭪W�h�U� ��PJ���8O�G�����q�.��1�� �AԖ_� h� ���M�Q� ߹��~!K�������'�s,SØj.�~v�.P3�)�r��N��x���������~��VU�������m�#�y%?UD��y~��g��i��ְĝ�>�#��-��mYV��Ҟ��#q�-�= ���i�]��K����N��� iՑ������(^2S����P��$S@]��j���\� ���d���e\y'0O���y�����! �!����M;tߪ%�EX����m�j�^�tZ�nn4��:- 1#&�ܕ��*��pA�r�V�r; �ۢ����e���z x��g��Ok)�K�������X����w"��\���Tn�G �IO�Ԏ���<�Qn�&W�J���/����W��TMRc���G��ph���\� ��,AH�:�5Q����Z����D ��>��ϋx���!!��L��R�6�n)*T����6�ܲ��~��Vj���u�;����6r�����=M�O�YYiִU�:�9_�[{�3����⇖v��u��f�� ��`v>����+;�23�ao��غ��1�x���Aҏl8R�w��n�4���X�|c�sg�V:�a~L��k��}����X�7�$���eG�.xnU��ս���$W�vv��1h���Ӄ�O�b舢f]ioE�oY���*�s02[��`��6I��'�?�����������ɮ��P_ߙ5�2"����S�%��I��u�à���%�Kj����0)�A�����������w��_r�N� U���kS!I��Bs(Swm��5��ju�_�}*X8KY�`/��SKeA0"�<����_���*��ι����Qp@��f�����ZQ�2���^�M�1`5W+b�aN��ROf9lg:��u!�ZQcXI���8Ì��������Q�ۛ%{}���G�� N���[�G,K~V��.,����E4$%���t���!ǩ�9�����n����ˑ�ҿFh9+(FgY Z2��� �ك�$m6ob鿷���&��t�0�[�ρ3���Wޮ����F��.w��� ԋïr�>�2v�MJ�KZ����g���%�{�I���v�Y2)m����$�;ӈ;e��}"�~�a�����Ӿ�#V,���O��?���&�N�ޠd��r٨���a����$���.�7H���ȩK�~��=J��8��+����O~��5���W|�� �ZN����'P_��8M�0܍ݓ*���i��o��)��������$�����ɐ@ � ����/�4����>�ht[=b ����2^z����P���Z�}=z�+���GT/��եbi"W�t!c��&���蹄膁p�V��b&U�7�`n�8��V^�����ۻ,�p�s��/h{۬�⸡����ηÙ��cأNPǡ�� ��>e��"Y�#�j�E�m�c�y K;$G,��C�w���m2�?�����م���.0�0������� �!OۃH8u�r�:�B4a�I��.���f�VC����_��1 �0 $-/�4�[��� ���M��d�=�w�2������5�R�)�:q��ȴ.�R�Bț��Zf��cmT�`ݾ�����3�ѯ�)�~�I� ~�&{���&-e��������X�,w<���$�����(�%qO�{/^���6����v�P��%5��Y�:�����u�����9No�t�ѣ L����tr��R��J��m��-f��!q�Z7NFq &�,&������o.�F��]��1~�н���N�`��_Y"���+���L�Q+��K{��5�2�0{�̴�� �0wJ���|�Bnx[u�x���I�k�JW�U������B{��I��3X6ʆ���F�=����ۺ��$>w1q�cNo�lV��7c�S'�e}yXL�����(�1�y*"R���?�c� S#T���L�$�PF�&��;;�E���A�;(�w�=u�V�<3����V����e�@ٹ@?.M��߉A�ek�t�f���λرxǠق��ԁ!�"OK,A{;R{�M��"���)�;�;a�a�����Wi~~���������*�$Q�����\�Fk���`�Yf⼑����g�[��=�4R�C)�r��Zϒ15�M��6D�iߝZMK��r&���`�?i����ȟHw�2���~��G�3h���o�����>y�j��嚾Hq2ޏR���FŚ�qqR�t���y�~Q؉R�`�+���4<��t��� ~�z�pSˤY&:�ӗj�A(8�3FX��,����zsg
Static task
static1
Behavioral task
behavioral1
Sample
9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662.exe
Resource
win10v2004-20240419-en
General
-
Target
9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662
-
Size
3.2MB
-
MD5
eb1f2c73175082ffbf60b798def4eff5
-
SHA1
f591667173d14cafceac660baa0077bb4261359f
-
SHA256
9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662
-
SHA512
37c3abf230245d52e25a1b9c93dc3f99dc6abd17724839e3956051a2ded28297d670a7dcfbf575eec96419057fb79d1666bb4b7bc27eae8bd44f4f162107d795
-
SSDEEP
98304:dJQQra7XOHN8pQHBi8ZJ9BYtRGuItoDxdB7Agl:YH2N8GBi2CWht+XB82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662
Files
-
9e1338827e0ac959a00d08b9251d27b91d9a7a552110d98a4e6d75a619913662.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 932KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 204KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE